CVE-2022-46020

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

38.95% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-434

Published

2022-12-20

Updated

2025-04-17

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46020.yaml

Security advisories

• 10vexh/Vulnerability/blob/main/WBCE%20CMS%20v1.5.4%20getshell.pdf

References

• CVE Record
• NVD entry